Virus and Spyware Removal Guides, uninstall instructions

What is Philadelphia?

Philadelphia is an updated version of the Stampado ransomware-type virus. It is distributed via phishing email messages that contain a fake overdue payment notice. These messages, however, often include links to Philadelphia's websites, which contain a Java application that downloads the ransomware.

Following successful infiltration, Philadelphia encrypts various files (for example, .7z, .avi, .bmp, .doc, etc.) stored on the victim's computer. During encryption, Philadelphia changes names of encrypted files to a number of random characters and appends the ".locked" extension.

For example, the encrypted file "sample.jpg" might be renamed to something similar to "HJG234B23JKHLK1J32KL1J3LKJOI.locked". Following successful encryption, Philadelphia opens a window that contains a ransom-demand message (LOCKED.txt).

What is MyStart.com?

The MyStart toolbar browser add-on is developed by Visicom Media. This browser toolbar can be downloaded from its homepage, however, it is often 'bundled' with free software downloaded from the Internet. At time of research, this potentially unwanted application was also bundled with fake downloads such as Java, Flash, and browser updates.

Bundling in this manner is a commonly-used and deceptive software marketing method. When installed on users' computers, this toolbar assigns the browser homepage and default search engine settings to mystart.com This website alone is not related to malware or virus infections, however, creators of this toolbar have full control over the software, and thus, are capable of redirecting users to malicious websites at any time.

What is home.dimakadima.com?

home.dimakadima.com is presented as an Internet search engine that supposedly enhances the browsing experience by generating improved results and by providing quick access to various popular websites.

Judging on appearance alone, home.dimakadima.com may seem legitimate and useful, however, this rogue website continually records information relating to users' browsing activity. Furthermore, developers promote it via a deceptive browser-hijacking application called Dima Kadima, which supposedly allows users to solve various quizzes.

What is iconssliding.com?

iconssliding.com is a fake search engine that falsely claims to generate improved search results. Judging on the appearance, iconssliding.com may seem legitimate and useful, however, this site is promoted via deceptive downloaders/installers that hijack web browsers and modify various options without permission.

In addition, this rogue website continually gathers various information relating to users' Internet browsing activity.

What is Net Surf?

Net Surf is a rogue application that supposedly saves time and money by providing coupons and notifications of special deals/discounts available on various e-shops. This functionality may appear legitimate and useful, however, Net Surf is categorized as a potentially unwanted program (PUP) and adware.

There are three main reasons for these negative associations: 1) stealth installation without consent; 2) display of intrusive online advertisements, and; 3) tracking of users' Internet browsing activity.

What is MSIL?

MSIL is a ransomware-type virus written in Microsoft Intermediate Language. This malware was first discovered by malware security researcher, SecPanda.

Once infiltrated, the virus encrypts various files and appends associated filenames with the ".ransom" extension (for example, "sample.jpg" is renamed to "sample.jpg.ransom"). MSIL then creates two text files ("README_TO_DECRYPT_FILES.txt" and "README_TO_DECRYPT_FILES.html"), placing them in each folder containing encrypted files.

What is Navigate Pro?

According to the developers, Navigate Pro saves time and money by providing coupons and notifications of special deals/discounts available on various online stores. Initially, this functionality may seem legitimate and useful, however, Navigate Pro often infiltrates systems without consent.

Furthermore, it delivers intrusive online advertisements and continually records various user-system information. For these reasons, Navigate Pro is categorized as a potentially unwanted program (PUP) and adware.

What is Tools Plus?

Tools Plus is a deceptive application that supposedly saves time and money by providing coupons and notifications of special deals/discounts available on various e-shops.

On initial inspection, Tools Plus may seem legitimate, however, this application is categorized as a potentially unwanted program (PUP) and adware. There are three main reasons for these negative associations: 1) installation without permission; 2) display of intrusive advertisements, and; 3) tracking of web browsing activity.

What is home.lightdials.com?

home.lightdials.com is presented as an Internet search engine that enhances the browsing experience by generating improved results. The appearance of this website barely differs from Google, Yahoo, Bing, and other reputable search engines. Therefore, many users believe that home.lightdials.com is also legitimate and useful.

In fact, developers promote this site via rogue download/installation set-ups that change web browser options without permission. In addition, home.lightdials.com records various information relating to users' Internet browsing activity.

What is nostopped.net?

Identical to nonestops.biz, notblocked.biz, stop-block.org, and many others, nostopped.net is a rogue application that falsely claims to allow users to visit websites blocked in their own countries. Judging on appearance alone, nostopped.net may seem legitimate and useful, however, this site is categorized as adware and a potentially unwanted program (PUP).

There are three main reasons for these negative associations: 1) stealth installation without consent; 2) display of intrusive online advertisements, and; 3) tracking of Internet browsing activity.